Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

[Resolved] Bp branded login and activation links

  • Participant
    Level: Initiated
    Posts: 3
    Daniele Balboni on March 20, 2017 at 9:42 pm #7973

    Hello
    i am developing a web site that use the following plugins

    1) buddypress
    2) bp branded login
    3) wp job manager https://wpjobmanager.com/

    Wp job manager allows users to create an account during the post a job process. After a user post a job, wp job manager create a user account and send an email with an activation link. I have an issue when bp branded login is active.

    If user clicks on the activation links and bp branded login is activated the user is redirected to homepage instead of a page where he can choose a custom password. If i disable bp branded login user everything works as expected.

    I think that in bp branded login some actions/filters and templates are missing to support this behaviour.

    The activation url is created in the core function wp_new_user_notification and the link look like $message .= ‘<‘ . network_site_url(“wp-login.php?action=rp&key=$key&login=” . rawurlencode($user->user_login), ‘login’) . “>\r\n\r\n”;

    And the ‘rp’ case is managed in wp-login.php

    Is it possible to have a custom activation page?

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on March 20, 2017 at 11:06 pm #7976

    Hi Daniele,
    Thank you for posting.

    You are right, It seems we did not consider the activation as we only considered BuddyPress registration.

    We can add support for custom account activation page or we can let wp-login.php handle it.
    What will be more useful for you ? Please let me know and we can update the plugin.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 3
    Daniele Balboni on March 27, 2017 at 8:24 pm #8298

    Hi Brajesh
    for me it would be better if plugin will handle a custom activation page.

    Daniele

  • Participant
    Level: Initiated
    Posts: 3
    Daniele Balboni on April 5, 2017 at 8:11 pm #8394

    Hi Brajesh
    do you have any update about my request?

    Daniele

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on April 6, 2017 at 4:51 am #8397

    Hi Daniele,
    I am sorry we missed it. Please allow us to put an update by Saturday.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on April 10, 2017 at 12:28 am #8554

    Hi Daniele,
    I am sorry I was not able to do it on Saturday. I will be updating this plugin today(IST) for sure.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on April 11, 2017 at 10:06 am #8563

    hi,
    Please upgrade to 1.3.2 and let me know if that works or not?

    the “rp” is for reset password link. On clicking the link, the user will get the password by email.

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on April 19, 2017 at 8:08 pm #8672

    Hi Daniele,
    Hope you are doing well.

    did the update work for you?

    Thank you
    Brajesh

  • Keymaster
    (BuddyDev Team)
    Posts: 24715
    Brajesh Singh on May 1, 2017 at 2:16 am #8910

    Closing it as resolved due to lack of replies. Please feel free to reopen it.

    Thank you
    Brajesh

You must be logged in to reply to this topic.

This topic is: resolved